Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
File: _ORf1v09kyaEwMW8J_T6YVoQkOA.mft (raw, json)
Hash identifier: 5rDiyZXUygMWESzNhdI4nUsS04MhXhzXSg7X9LoibbM=
Subject key identifier: 11:56:71:E7:50:C1:40:3B:F3:B1:5B:A5:13:A1:31:BF:48:D7:4A:B7
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Certificate issuer: /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial: 01A18B2E62C1FF92BA2AAB603BCAC80B0D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
Manifest number: 1150
Signing time: Fri 30 Oct 2026 05:00:35 +0000
Manifest this update: Fri 30 Oct 2026 05:00:35 +0000
Manifest next update: Sat 31 Oct 2026 05:00:35 +0000
Files and hashes: 1: _ORf1v09kyaEwMW8J_T6YVoQkOA.crl (hash: 2ZSNYikr0XE3bzQFk0brFffHEslYNIjZE22ta2Q5buA=)
2: abxz-YS2pIcWJysLZsLURj3wFjE.roa (hash: v8u8I3KyfjrBtGFxRTuhA7B6RHsn+uH/zjkzCl303+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:2e:62:c1:ff:92:ba:2a:ab:60:3b:ca:c8:0b:0d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Validity
Not Before: Oct 30 05:00:35 2026 GMT
Not After : Oct 31 05:00:35 2026 GMT
Subject: CN=115671e750c1403bf3b15ba513a131bf48d74ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:c3:8f:4c:33:a4:c0:69:2b:41:4c:b7:72:
bb:68:bc:61:6b:4d:5a:59:2c:5d:9e:34:a4:73:0d:
e5:72:4a:34:b3:a1:98:02:42:70:20:07:65:d3:51:
c5:d8:6b:2c:c0:fb:c9:fd:15:f1:8b:88:19:98:25:
0a:31:a7:75:f3:c9:0f:04:30:53:7f:eb:57:28:89:
05:1b:45:db:52:92:88:dc:84:13:c0:b2:3b:19:b9:
54:e7:01:ef:fd:ac:7b:31:01:d9:5b:7e:91:52:80:
4f:e6:76:31:0a:50:5c:f6:28:5f:99:e7:89:fe:ca:
7b:6b:73:4e:4d:fa:88:b5:18:cc:6c:ed:e3:68:33:
5d:25:56:af:14:27:6f:0b:22:03:e6:ef:68:70:cd:
9f:44:c9:76:7a:f2:15:8d:d3:5f:db:31:5e:d5:cc:
79:2b:d7:5a:fd:3e:6c:42:57:95:35:4b:6d:bc:ac:
eb:8c:ea:55:e4:00:2e:cf:62:91:aa:6c:ed:95:a8:
6e:68:44:f9:f9:ee:be:96:1e:f3:ce:6f:a1:6b:38:
b7:76:68:a0:90:ba:49:64:f2:85:ec:3d:32:88:7a:
66:02:cf:58:ce:25:91:4c:e9:1e:84:3c:8e:bb:cf:
25:a8:51:aa:78:2e:7f:e5:79:7c:31:67:42:e0:2c:
4e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:56:71:E7:50:C1:40:3B:F3:B1:5B:A5:13:A1:31:BF:48:D7:4A:B7
X509v3 Authority Key Identifier:
keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b1:b2:c7:aa:d4:92:cb:0c:7b:aa:2b:b4:f1:8d:62:ee:b3:
52:63:b0:01:9e:46:1d:49:15:7b:1f:03:e4:40:59:e3:a1:a4:
38:5b:13:16:2b:23:8c:6e:13:3e:1a:ea:b5:15:43:3d:4d:e6:
b2:f0:bf:5c:19:61:e9:51:ac:ab:b7:06:40:28:32:84:4b:0a:
7f:dd:35:68:af:0d:4f:d8:d5:2f:ca:eb:7e:6d:44:eb:b7:59:
fc:32:63:83:ff:14:35:fa:ad:c2:db:ba:8b:dc:c7:fd:1f:dd:
72:07:67:7c:3f:b7:41:09:5b:2d:96:87:70:31:dd:95:c7:f5:
de:a0:f5:0f:cc:a5:02:38:05:ba:87:ae:80:37:0e:e0:b9:aa:
b5:74:ad:35:37:72:aa:94:ba:81:61:e0:ac:d9:32:43:46:57:
69:dc:88:65:0e:a8:71:4d:fb:66:4a:6f:87:5c:55:4b:d4:91:
f1:41:46:d0:00:1c:b7:50:e2:52:02:d4:a3:dc:f2:70:4b:6c:
f4:e2:97:fa:99:5e:b6:b8:f8:47:30:9f:4d:46:1c:ae:26:eb:
60:ed:69:96:4f:46:db:ac:38:7b:f0:88:51:58:09:f3:e4:df:
29:02:6f:68:c9:d8:5f:6e:a5:fc:83:a1:72:12:18:4d:b5:dc:
bb:4a:3b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:22:11 2026 by rpki-client